Vulnerabilities (CVE)

Filtered by vendor Mambo Subscribe
Total 123 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-3980 1 Mambo 1 Mambo Gallery Manager 2025-04-03 6.8 MEDIUM N/A
PHP remote file inclusion vulnerability in administrator/components/com_mgm/help.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVE-2004-1826 1 Mambo 1 Mambo Open Source 4.5 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2006-3263 1 Mambo 1 Mambo 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.